0ba612d07d
This patch adopts the recommendation outlined in OSSN-0090 [1], in
which two instances of the glance-api service are deployed:
- A "user facing" glance-api service, accessible via the Public
keystone endpoint.
- An "internal facing only" service, accessible via the Admin and
Internal keystone endpoints.
The user facing instance is configured so it does not report any image
location information. This is achieved by configuring glance-api.conf
with the show_image_direct_url and show_multiple_locations set to False.
The internal service operates on a separate TCP port (defaults to 9293)
with its own glance-api.conf that configures show_image_direct_url and
show_multiple_locations set to True.
In order for cinder and nova to have access to the image location data,
both services are configured to access glance via the internal service.
[1] https://wiki.openstack.org/wiki/OSSN/OSSN-0090
stable/zed:
Backports include I456b4235242cae125f5ad4cd9cc7415f2699462c, which
fixed a typo in the original patch.
Closes-Bug: #1822540
Depends-On: https://review.opendev.org/c/openstack/puppet-tripleo/+/865874
Depends-On: https://review.opendev.org/c/openstack/tripleo-common/+/865873
Change-Id: Id093613f9d410eb3fe5564a724c0f75275eeb4e8
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| enable-internal-tls.j2.yaml | ||
| enable-memcached-tls.yaml | ||
| enable-tls.yaml | ||
| inject-trust-anchor-hiera.yaml | ||
| inject-trust-anchor.yaml | ||
| no-tls-endpoints-public-ip.yaml | ||
| tls-endpoints-public-dns.yaml | ||
| tls-endpoints-public-ip.yaml | ||
| tls-everywhere-endpoints-dns.yaml | ||